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(57) Abstract: A method and apparatus for detecting conditions that indicate unauthorized usage of a vehicle and for responding to 
ihe conditions that indicate the vehicle is being used in an unauthorized or unintended way. A vehicle computer is used to monitor 
conditions of a driver and unintended usage. The computer is also used to respond to conditions that indicate an unauthorized or 
unmtended vehicle usage has occurred. The vehicle is shut down and/or disabled when an unauthorized usage is detected. 
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ROUTE CONTROL SYSTEM 

Technical Field 

The present invention relates to a method and apparatus for monitoring unauthorized 
usage of a vehicle and, more particularly, the present invention relates to a method and apparatus 
that detects conditions of a driver and a vehicle that indicate operation of the vehicle : 
unauthorized and provide a response to the detected conditions. 



lis 



Background Art 

Unintended usages of a vehicle, such as a tractor trailer, include driving under the 
influence of drags or alcohol, driviiig of a vehicle when fatigued, driving of a stolen vehicle, 
deviating from a planned route, driving a vehicle into a restricted area, uncoupling a trailer at an 
unplanned location, and driving a vehicle in need of maintenance. 

Driving of a vehicle by an impaired operator greatly increases the chance that the vehicle 
will be involved in an accident. Federal Motor Carrier Safety Standard #49 C.F.R. 392.3 
requires fatigue impaired drivers to stop. According to the National Highway Traffic Safety 
Administration (NHTSA), one out of eight b-affic fataKties in 1998 resulted from a collision with 
a large tiuck. Alcohol related fataKties accounted for 38% of aU traffic fatalities in 1998. 
According to the Commercial Car Journal (CCJ) survey. 55o/o of drivers violate hours of service 
(HQS) rules by driving more than 10 hours without an 8 hour break. Stolen tractors and/or 
trailers cost fleet owners a large sum of money per occurrence. Vehicles may become unsafe 
when they are not properly maintained. 

Prior art disclosures have dealt with monitoring vehicle drivers. Examples include 
detecting a drowsy driver by monitoring eyelid movement of the driver, detecting drowsmess by 
sensmg meandering of a vehicle in a lane of a road, monitoring heart rate and skin vibrations to 
detect the mental condition of tiie driver, testing a drivers alertness by requiring the driver to 
move a turn signal lever in a sequence of requested directions, detecting intoxication by 
monitoring a driver's iris, monitoring acceleration and .deceleration and steering irregularities to 
detennine a drivers fitness. 
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Prior art disclosures have dealt with tampering with a trailer. It is known in the prior art 
to sense penetration into a trailer. A camera and sound recorder is used during theft. One prior 
art theft prevention systan monitors doors and alats a central control. 

It is known in the prior art to track travel of a long haul truck within an acceptable 
rectangular zone and report exceptions to a central controLor generate an exception report. 

What is needed is an interactive monitoring system that detects conditions that indicate 
unautiiorized vehicle usage and provides for a response to the detected conditions that assures 
that the usage is not unauthorized or shuts the vehicle down. 

Disclosure of Invention 

The present invention relates to a niethod and apparatus for monitoring unauthorized 
usage of a vehicle. One embodiment of the method of monitoring unauthorized usage of a 
vehicle concerns testing the competency of a driver to operate a motorized vehicle. A randomly 
generated number is displayed in the vehicle for a given period of time. A user interface is 
provided in the vehicle for the driver to enter digits that correspond to the randomly generated 
number. The system determmes whether the driver has entered the digits that correspond the 
randomly generated number in a proper sequence within a given period of time. In the 
exemplary embodiment, a vehicle computer is used to generate the randomly generated number. 
The user interface is connected to the vehicle computer. A display is coupled to the computer for 
displaying the randomly generated number.. The C9mputer is programmed to determine whether 
the driver has entered digits that correspond to the randomly g«ierated number in a proper 
sequence. 

In one embodnnent of the method of testing the competency of a driver to operate a 
motorized vehicle, a forward sequence notation or a reverse sequence notation is displayed. The 
forward or reverse sequence'notation provides an indication to the driver to enter the digits in one 
of a forward sequence or a reverse sequence. The proper sequence corresponds to the displayed 
sequence notation. A driver reaction time may be logged when it is determined that the driver 
has entered digits that correspond to the randoml}^ generated number in the proper sequence 
within the given period of time. The driver is retested after a given period of time. The driver 
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may be required to enter a driver identification code before the randomly generated number is 
displayed. A new driver is tested when the driver enters a driver identification code. At least one 
of the driyfer reaction time and an ability to enter the digits that correspond to the randomly 
generated number are logged when the driver fails to enter digits that correspond to the randomly 
generated number in the proper sequence within the giveryperiod of time. A central control is 
notified when the driver has failed to enter the digits tiiat correspond to the randomly generated 
number in the proper sequende within a given period of time. The vehicle may be disabled when 
the driver fails to enter digits that correspond to the randomly generated number in the proper 
sequence within the given period of time. 

In one embodiment, a vehicle is disabled when a potential theft occurs. The system 
determines that a driver is not authorized to operate the vehicle. The system also determines that 
the vehicle has deviated firom a planned route. The vehicle is disabled when it is determined that 
the driver is not authorized to operate the vehicle and has deviated fi-om the planned route. 

Variations of the method of disabling a vehicle when a potential theft occurs include 
tracking the location of the vehicle and notifying a central control location when it is detemiined 
that the driver is not authorized to operate the vehicle and it is determined that the vehicle has 
deviated fi-om the planned route. In the method, the driver may be requested to enter an 
authorized driver code and route code within a given period of time. The system wdll determine 
whether an authorized driver code has been entered by the driver. The vehicle will be disabled if 
an autiiorized driver code is not entered by the driver. 

In one embodiment, a vehicle computer and a global positioning system are used to 
determine that the driver is not authorized to operate the vehicle and the vehicle has deviated 
fi-om the plaimed route. The vehicle computer has an interface that allows tiie driver to enter a 
driver authorization code. The computer is programmed to detomine whether the driver is 
authorized to operate tiie vehicle. The global positioning system is coupled to the computer for 
determining that the vehicle has deviated firom the planned route. The computer is programmed 
to disable the vehicle when the driver is not authorized and the vehicle has deviated from the 
plaimed route. 

In one embodiment, a vehicle is disabled when a predetennined number of service hovirs 
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is exceeded. The system determines whether an allowable number of service hours has been 
exceeded by a driven A central control is notified when the allowable number of vehicle service 
hours has been exceeded by the driver. The system determines whether the central control 
provided authorization to exceed the allowable number of service hours. The driver is notified 
that the vehicle will be disabled within a given period of time when authorization to exceed the 
allowable number of vehicle service hours is not granted. The vehicle is then disabled. 

In variations of the method for disabling a vehicle when a predetermined niunber of 
service hours is exceeded includes reactivating the vehicle by entering a valid drivers code. The 
driver code may be revalidated after a defined rest period has lapsed. 

In one embodiment, a vehicle computer and a communication system are used to disable 
a vehicle when a predetermined number of service hours is exceeded. The vehicle computer is 
programmed to determine whether an allowable number of service hours has been exceeded by 
the driver. The communication system is coiq>led to the computer for notifying the central . 
control when the allowable number of service hours has been exceeded. The communication 
system is configured to receive authorization firom the central control to exceed the allowable 
nimaber of service hours and to notify the driver that the vehicle would be disabled within the 
given period of time when authorization to exceed the number of allowable vehicle service hours 
is not granted. The computer is programmed to disable a vehicle when authorization to exceed 
the allowable number of vehicle service hours is not granted by the central control. 

In one embodiment, a route traveled by a vehicle is controlled. An authorized route is 
defined with an acceptable deviation radius. When it is determined that a location of the vehicle 
is outside the acceptable deviation radius, the vehicle is shut down.' A computer and global 
positioning system maybe used to control the route traveled by the vehicle. The computer is 
programmed to define the authorized route with the authorized acceptable deviation radius. The 
global positioning system is coupled to the computer for determining location of the vehicle. 
The computer is programmed to determine whether the location of the vehicle is outside the 
acceptable radius. The computer shuts down the vehicle if the vehicle is outside the acceptable 
deviation radius for a predetermined period of time. 

In variations of the method for controlling a route traveled by the vehicle, the driver and a 
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central controller is notified that the vehicle has deviated from the authorized route. An interface 
between the driver and the central control is provided that allows the driver to request 
authorization to deviate from the authorized route. The system determines whether authorization 
from the central control to deviate from the authorized route is granted. The vehicle is allowed to 
deviate from the authorized route when authorization to deviate from the authorized route is 
granted by the central control. The vehicle is shut down if the vehicle fails to enter the 
acceptable deviation radius or obtain authorization to deviate from the authorized route from the 
central control. Emergency start instructions may be displayed when the vehicle is shut down. 
Control information may be displayed that allows emergency personnel to obtain a valid driver 
code and temporary route deviation code. 

hi one embodiment, a route traveled by the vehicle is controlled. A perimeter is defined 
around a restricted area. When it is determined that a location of the vehicle is inside the 
perimeter around the restricted area, the vehicle is shut down. The computer and a global 
positioning system may be used to define flie perimeter around a restricted area and determine 
whether the location of the vehicle is inside the perimeter. The computer is programmed to 
define a perimeter aroimd the restricted area. The global positioning system is coupled to the 
computer for determining the location of the vehicle. The computer is programmed to determine 
whether a location of the vehicle is inside the perimeter. The computer shuts the vehicle down if 
the vehicle is inside the perimeter. 

Ih variations of the method for controlling a route traveled by a vehicle the driver, a 
central controller, and a restricted area site are notified that the vehicle is in the perimetief around 
the restricted area. The system determines whether authorization from ttie restricted areas site to 
enter the perimeter of a restricted area is granted. The vehicle is allowed to enta: the perimeter of 
a restricted area when authorization to enter the perimeter is granted. The vehicle is shut down if 
the vehicle fails to leave the perimeter or obtain authorization to enter the perimeter from the 
restricted area site. Law enforcement officials may be notified that the perimeter has been 
breached. The vehicle may be reactivated by entering a valid drivers code and the temporary 
route deviation code. Emergency start instmctions may be displayed when the vehicle is shut 
down. Contact information may be displayed that allows emergency personnel to obtain a valid 
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driver code and a temporaiy route deviation code that allows the vehicle to be moved. 

In one embodiment, uncoupling of a vehicle trailer is monitored- A planned trailer - 
uncoupling area is defined. When it is determined that the trailer has been uncoupled outside the 
planned xmcoupling area, the syistem determines the location of the vehicle with a. global 
positioning system. Uncoupling of the vehicle trailer may-be monitored using an onboard 
vehicle computer and a global positioning system. The vehicle computer is programmed to 
define a planned trailer uncoupling area. The global positioning system is coupled to the 
computer for determining the location of the trailer. The computer is programmed to determine 
that the trailer has been uncoupled outside the plaimed uncoupling area. 

In variations of the method for monitoring a vehicle trailer, a traileir battery backup is 
activated. . The doors of the trailer are automatically locked. The fifth wheel of the vehicle is 
automatically locked, ispring brakes of the trailer are automatically applied. . The tires may be 
automatically deflated. The trailer battery backup, the doors of the trailer, the fifth wheel of the 
vehicle, tire inflation and/or deflation and the spring brakes of the trailer may be controlled by the 
on board vehicle computer. 

In one embodiment, a location of the vehicle is monitored when the main electrical power 
that is supplied-to an onboard vehicle computer is-removed. The system determines a main 
electrical power supply is not available to the vehicle onboard computer. A battery backup is 
activated to power the vehicle onboard computer. The system determines the location of the 
vehicle using a global positioning system. The location of the vehicle is transmitted to a central 
control. An onboard vehicle computer, a backup battery, a global positioning system and a 
communication system may be used to monitor the vehicle location when electrical power 
supplied to the onboard vehicle computer is removed. The onboard vehicle computer is 
programmed to determine that the main electrical power supply is not available to the vehicle 
onboard computer. The backup battery is coupled to the onboard computer. The computer is 
programmed to activate the battery backup when the main electrical power supply is not 
available to the computer. The global positioning system is coupled to the computer for 
determining the location of the vehicle. The communication system is coupled to the computer 
for transmitting.the location of the vehicle to a central control. 
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In one embodiment, vehicle maintenance is scheduled. Vehicle mileage is compared to a 
predetemiined mileage required for maintenance. A number of hours a vehicle operation is 
compared to a predetermined number of hours of vehicle operation. An indication that ■ 
maintenance is required is provided when the vehicle mileage exceeds the predetemiined mileage 
or when the number of hours of vehicle operation exceedsjhe predetermined number of hours of 
vehicle operation. The system identifies the location of the vehicle and provides directions to a 
maintenance facihty that is near the vehicle. An onboard vehicle computer and display maybe 
used to schedule vehicle maintenance. The onboard vehicle computer is programmed to compare 
the vehicle mileage to the predetermined mileage required for maintenance and to compare the 
mmiber of hours of vehicle operation to a predetermined number of hours of vehicle operation. 
The display is coupled to flie computer for providing an indication that maintenance is required 
while vehicle mileage exceeds the predetermined mileage or when the number of hours of 
vehicle operation exceeds the predetermined number of hours of vehicle operation. The global 
positioning sj^tem is coupled to the computer for identifying the location of the vehicle. The 
computer is programmed to provide directions to the maintenance facility that is near the vehicle. 

In one embodiment of the method for scheduling vehicle maintenance, service is 
scheduled automatically at a maintenance facility for the vehicle. The vehicle computer may be 
programmed to automatically schedule the service at the maintenance facility. 

Additional features of the invention will become apparent and a fuller understanding 
I obtained by reading the following detailed description in coimection with the accompanying 
drawings. - * 

Brief Description of Drawings 

Figure 1 is a schematic representation of a system for monitoring unauthorized usage 
I from a vehicle; 

Figure 2 is a schematic representation of hardware included on a vehicle usfcd in the 
system for monitoring unauthorized usage; 

Figure 3 is a flow chart showing communication between an onboard computer, a driver, 
a tractor and trailer, a central control and a restricted area; 
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Figure 4 is a side elevational view of a tractor; 

Figure S is a schematic illustration of a trailer in communication with a vehicle computer; 

Figure 6 is a flow chart showing steps performed by a system for monitoring 
unauthorized vehicle usage (UVU); 

Figure 7 is a flow chart depicting a system for det^imining driver competency; 

Figure 8 is a flow chart depicting a system for determining driver authorization and 
checking hours of service; 

Figure 9 is a flow chart that illustrates operation of a system for naonitoring deviations 
from a planned route; 

Figure 10 is a flow chart illustrating a system for monitoring unplanned trailer 
uncoupling; 

Figure 11 is a flow chart depicting a system for monitoring unplanned loss of main 
electrical power to a vehicle onboard computer; and. 

Figure 12 is a flow chart illustrating a system for scheduling maintenance. 

Best Mode for Carrying Out the Invention 

The following disclosiure concerns a system 10 that detects various conditions of a vehicle 
12 arid a driver 14 or operator that indicate that the vehicle is being used in an unauthorized 
manner and responding to the detected conditions. 

Referring to Figures 1 and 2, the illustrated vehicle 12 is a tractor trailer 16a, 16b. It 
should be readily apparent that the system could be used with any type of vehicle, such as an 
automobile. In the illustrated embodiment, the tractor 16a is equipped with an onboard computer 
18, a display 20 coupled to the onboard computer 18 and a user interface 22 coupled to the 
onboard computer 18. The display 20 is located in the vehicle dash in the exemplary 
embodiment. The display displays messages from the onboard computer 18. The display 20 is 
also used for communication with central control personnel. In the illustrated embodiment, a 
digital camera 19 is coupled to the computer 1 8. The digital camera is mounted inside the ^ 
vehicle and is positioned to take a picture of the driver 14. The camera is mounted on the vehicle 
dash or the driver's side "A" pillar facing the person in the driver's seat. / 
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Referring to Figure 2, a global positioning system antenna 24 and a satellite 
conununications unit 26 are coupled to the computer 18, The computer 18 is used to monitor 
driver identification, hours behind the wheel, travel distance, driver reaction time and state of 
alertness, global positioning system informatioii, such as location, time and date, speed, direction 
and distance traveled, trailer coupling status, main power jupply to the unauthorized vehicle 
usage system (UVU) 10 and vehicle maintenance data and status relative to plaimed vehicle 
maintenance and status. 

Referring to Figure 1, the system 10 monitors driver identification and driver competency 
using the user interface 22. The system 10 conununicates with a central control 28 and a 
restricted area site 30 and receives information fi-om a global positioning satellite 32 to detect 
conditions that indicate that the vehicle 12 is being used in an unauthorized fashion. 

Referring to Figure 5, in one embodiment the trailer 16b includes a separate onboard 
computer 34, a global positioning system anteima 36 and a satellite conmiiinications unit 38. 

Figure 3 shows the communication between the on-board computer, the driver, the tractor 
& trailer, central control, and restricted areas. The computer 18 is linked to the satellite 
communications unit 26 which allows satellite and transceiver communication and receipt of 
disabling commands fix>m the control center 28 or restricted area 30. The satelUte 
commvmications unit 26 of the tractor 16a and the satellite conamunications unit 38 of the trailer 
16b allow two way communication between the tractor 16a and the trailer 16b. A sensor 40 is 
included on a trailer door 42 that is monitored by the onboard computer 18 or 34 to determine 
whether the trailer door 42 is open or closed. The onboard computer 1 8 monitors whether the 
trailer electrical connection 43 is open or closed. The onboard computer 18 controls inflation 
and deflation of tires 44 of the tractor trailer 16a, 16b. The onboard computer 18 monitors 
engine and vehicle data, driver input data and vehicle mileage. The onboard computer 18 
activates tractor disabling commands, such as fuel shut-of^ ignition disabling and flashing Ughts, 
etc. 

Figure 6 is a flow chart that lists tests performed by the system 10 that detect conditions 
that indicate the vehicle is being used in an unauthorized manner or by an unauthorized person. 
Although Figure 6 illustrates six tests that are performed by the illustrated system 10 to detec^ 
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conditions that indicate unauthorized vehicle usage, it should-be readily apparent to those skilled 
in the art that each of the tests listed on Figure 6 can be used separately to detect conditions that 
are indicative of unauthorized vehicle use. In the illustrated embodijnent, the sj^tem 10 includes 
a driver competency test 46 and unauthorized driver and hours of service check 48, a deviation 
from planned route check 50, an unplaimed trailer imcoupling routine 52, an unplanned loss of 
main electrical power to the imautborized vehicle use onboard computer check 54 and a daily 
reporting and preventative maintenance scheduling check 56. 

Figure 7 illustrates the driver competency test 46. In the illustrated embodiment, the 
driver is prompted to mter a driver identification code at 58. A randomly generated nimiber is 
flashed on the display 20 at 60, In one embodiment, the randomly generated number is a four 
digit number that is flashed on the driver's display screen 20 for fom- seconds. In one 
embodiment, a sequence notation, such as a forward or reverse sequence notation, is displayed 
with the randomly generated number. It should be readily apparent that the number of digits of 
the number could be a number other than four. 

In the illustrated embodiment, a sequence direction notation is also shown on the display 
20. For example, a forward indicator requires the driver to enter the number as flashed oh the 
display. A reverse indicator-requures that the driver enter the.same number, but by entering the 
digits of the nvmiber in reverse order. For example, if 4935 were shown on the driver's display 
20, along with a "forward" indicator, the driver would be expected to enter 4935, If the nimiber 
4935 where shown on the driver's display along with ''reverse," the driver would be expected to 
enter 5394. In the exemplary embodiment, the number of test digits can be increased at the 
option of the vehicle owner. The onboard computer 18 randomly selects the entry sequence 
required, "forward" or "reverse" in the illustrated embodiment. The onboard computer 1 8 
determines whether the number entered by the driver is the correct number entered in the proper 
sequence within a given time at 62. Figure 7 illustrates that the given time to enter the number 
in the proper sequence is within 8 seconds. However, any times listed on the flow charts are for 
illustrative purposes only and any time for entering the number in the proper sequence can be 
selected. ^ / 

If the number is entered in the proper sequence within the given period of time, ffie 
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onboard computer 1 8 logs the driver reaction time, date and time of the driver competency check 
for each attempt at 64. In the illustrated embodiment, a retest is delayed for a few hours, a 
specific time of the day or until a new driver code is entered 66. 

If the driver failed to enter Ihe displayed number in a proper sequence within the given 
period of time, the onboard computer 1 8 determines whetiier the driver had failed the test more 
than twice within the given period of time at 68, such as 15 minutes in one embodiment. If the 
driver failed the test less than three times, the driver is tested again. If the driver failed the test 
more than twice within a given period of time, the dnvex reaction time and inability to enter the 
proper number in the proper sequence is logged and central control is notified of the situation at 
70. In the illustrated embodiment, the onboard computer 18 may be programmed to optionally 
disable the vehicle for one hour or until either central Control provides an override code or a new 
driver code is entered. 

In the exemplary embodiment, when the driver fails the test more than twice within the 
given period of time, fifteen minutes in the illustrated embodiment, the system logs and transmit 
to central control 28 a real time photo of the driver, the reaction time and the inabihty to enter the 
proper number for each attempt at 70. 

In the exemplary embodiment, the driver competency test 46 is required under the 
following conditions : 

1. Initial vehicle start-up; 

2. After a predetermined period of time within a normally allowed hours of services. 
This time may be the fiinction of the jplaxmed route and timing. Generally, the 
predetermined time would be after midway through the normal hours of sarvice. 
However, the driver covld be given the flexibility to perform the retest any time 
during the second half of his allowable hours of service, allowing the driver to 
perform the test at a more convenient stopping point for food or fixel. 

3. Each hour beyond the normally allowed hours of service. 

In the exemplary embodiment, the driver* s reaction time is kept in a history file. In the 
illustrated embodiment, the user interface 22 is used to enter the digits of the displayed number. 
In the illustrated embodiment, the user interface is a keyboard. The user uiterface may ^Iso be a 
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keypad-or the Stalk Gf-an-eleGtrGnie communications xmit. Such as the stalk disclosed in 
provisional patent application Serial No. 60/332,865, entitled "INTEGRATED VEHICLE 
COMMUNICATIONS DISPLAY," filed on November 6, 2001, that is incorporated herein by 
reference in its entirety. The random number may include numeric, alphanumeric or alphabetic 
symbols. The display 20 may display the words "forward" or "reverse" or the letters *T" or **R" 
or arrow signals or to indicate that a forward sequence or a reverse sequence is 
required. For a higher degree of difficulty, the test display can show forward minus some value 
or reverse minus some value or forward or reverse plus some value. For example, F-1 or R+2. 

The degree of difficulty can be tailored to the load being carried. General loads would 
use the first level of the test. Driver's hauling flammable hquids, hazardous or high value 
material would be required to pass the test using the higher or second level of difiSculty. The test 
measures alertness, flie ability to concentrate and reaction time. The degree of difficulty of the 
test can be raised by adding digits. 

Examples of two possible levels of difficulty for the test follow: 



Degree of Difficulty 


Requested Sequence 


Displayed Request 


Proper Response 


NORMAL 


F 


5894 


5894 




F-1 


6231 


6230 




R 


7684 


4867 




F 


AXZ2 


AXZ2 




R 


W5BC 


CB5W 






fflGHER 


R-2 


6527 


7254 




F+2 


66251 


66253 




R 


546W7 


7W645 



The computer 18 records the result of the test and gives a warning when the test is) failed, 
but does not necessarily impede the ability to start or operate the vehicle. The driver competency 
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test 46 can be overwridden in case of an emergency. However, ovmiding the test will be 
recorded as an intentional override for a given driver and will be provided in the driver history 
for the fleet manager. Recorded results of the driver competency test 46 can be used to counsel 
the driver; for real time intervention by the fleet manager and may pass liability from the fleet to 
the driver in case of an accident. The driver competency test 46 assesses driver fatigue and 
substance abuse. 

In one embodiment, if the driver fails the test and ignition is restricted based upon the 
failure of the driver competency test 46, an emergency override button can be depressed by the 
driver for overriding the first negative evaluation and for starting the engine during emergency 
conditions. However, the ovenide action would be noted for the specific driver, along with the 
date, time and odometerreading of the tractor 16a. The^ fleet manager may restrict the driving 
time or distance for an emergency override. This would allow emergency movement of the 
vehicle, but would require a satisfactory test to continue beyond a certam time or distance. 

The specific reaction time can be preset or left vq? to tiie fleet manager's judgement. The 
fleet managCT can set the system to require a retest randomly or at set intervals like every six to 
twelve hours. If the driver sees a request for retest on the display 20, the driver should pull over 
within .a set period of time to perform the test only after the vehicle is safely parked. The driver 
competency test_46 gives the driver a warning if reaction times are not acceptable and that the 
driver should consider pulling off the road until the driver is able to exhibit proper reaction times. 
Acceptable reaction times for the test can be reduced as the driver gains experience. 

When a driver uses the emergenicy override feature, ignores ithe computer request for 
retest or continues to drive with known poor reaction time, a signal is sent via satellite or cell 
phone to the fleet manager giving real time notification of a potentiaUy impaired driver operating 
the vehicle and its location in the exemplary embodiment. The driver competency test 46 can 
automatically, or upon the demand of the fleet manager disable the cruise control feature of the 
tractor 16a. 

Figure 8 is a schematic showing the unauthorized driver and hours of service check 48. 
The unauthorized driver arid hours of service check 48 detects violations of federal hours of 
service requirements, unauthorized usage and route deviation and has the abiUty to locate a stolen 
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vehicle. The driver is prompted to enter an authorized driver code and route code 72. In the 
exemplary embodiment, the vehicle 12 does not run longer than a predetermined amount of time, 
such as five minutes, if an authorized driver code and route code are not entered. In the 
exemplary embodiment, a one time grace period is available for emergency purposes to move the 
vehicle away from a hazardous condition, like sitting on railroad tracks. The vehicle owner can 
vary the times shown on Figure 8. 

The onboard computer 1 8 determines whether the driver is authorized 74. If the driver is 
not authorized, the onboard computer 18 determines whether the tractor trailer 16a, 16b has 
deviated from the authorized route 76. The onboard computer 18 determines that the tractor 
trailer 16a, 16b has deviated from the authorized route by comparing the position of the tractor 
trailer 16a, 16b provided to the onboard computer 18 by the global positioning system 24 to the 
route programmed into the onboard computer 18 as a result of entering a route code. The 
combination of an unauthorized driver and deviation from the authorized route provides an 
indication that the tractor trailer 16a, 16b has been stolen or highjacked. The driver is notified to 
pull over as the vehicle will be disabled within a given period of time, within five minutes in the 
illustrated embodiment and the controller 28 is notified at 78. 

Vehicle shut dovm begins after the given period of time has elapsed at 80, Central 
control is notified of the vehicle's location. The vehicle can be reactivated by entering a valid 
driver code. 

When the onboard computer 18 determines that the driver is not authorized, but the 
tractor trailer 16a, 16b has not deviated from the authorized route, the system 10 asks the driver 
to enter an authorized driver code or voluntarily shut down the vehicle within a given period of 
time 82. The central control 28 is notified that the driver is not authorized by a message that it 
sent from the vehicle 12 through the satellite communications unit 26 in the exemplary 
embodiment. After the given period of time, ten minutes in one embodiment, has elapsed, the 
onboard computer 18 determines whether an authorized driver code was entered at 84. If the 
computer 18 determines that an authorized driver code was not entered the driver is notified to 
pull over as the vehicle will be disabled with a given period of time 78, five minutes in the 
illustrated embodiment. The central control 28 is notified that the driver is not authorized and in 
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the illustrated embodiment a photo of the driver is transmitted to central control. Vehicle shut 
down begms after the prMenrnned timeTXentia coiiffol 281snotified of the vehicle location. 
The vehicle will be reactivated by entering a valid driver code 80. 

When the computer 1 8 determines that the driver is authorized at 74 or that an authorized 
driver code was entered at 84 the computer 18 determinesjvhether a maximum allowable number 
of hours has been exceeded 86. If the maximum number of allowable hours has not been 
exceeded, the unauthorized driver and hours of service check is repeated after a given period, of 
time, one hour m the illustrated embodiment. If the predetermined maximum nmnber of hours 
allowed is exceeded, the driver is notified to pull off the road for a rest period as hours have been 
exceeded 88. The computer 1 8 determines whether the driver shut down the vehicle within a 
predefined time, thirty minutes in one embodiment or whether a new driver took over 90, The 
computer determines whether the vehicle shut down by monitoring the vehicle. The computer 
determines whether a new driver took over by determining whether a new driver code was 
entered. 

If the vehicle was shut down wiftin a predefined time, thirty minutes in the illustrated 
embodiment, or a new driver took over, the unauthorized driver and hours of service check 48 is 
periodically repeated every one hour in the illustrated embodiment. 

If the driver did not shut the vehicle down within thirty minutes and a new driver did not 
take over, the onboard computer 18 causes the satellite commimications unit 26 to notify central 
control that the driver has exceeded the maximum number of allowable hoiffs 92. In the 
exemplary embodiment, central control 28 may give the driver authorization to exceed allowable 
hours by one hour. The onboard computer 1 8 monitors the satellite conununications unit 26 to 
determine whether central control gave the driver a revised authorization code to exceed 
allowable hours. The onboard computer 18 determines whether central control issued and the 
driver entered the revised authorization code to exceed the allowable hours by one hour at or a 
new driver took over at 94. 

If central control gave the driver an authorization code that was entered by the driver to 
exceed allowable hours by one hom*, the unauthorized driver and hours of service check is 
performed again at a predefined time, one hour in the illustrated embodiment If central control 
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did not give a revised authorization code to exceed allowable hours or the driver did not enter the 
revised authorization code to exceed allowable hotirs by one hour, the driver is notified to pull 
over as the vehicle will be disabled after a predefined time has elapsed at 96, thirty minutes in 
one embodiment. Vehicle shut down begins after the predefined time, thirty minutes in the 
exemplary embodiment has lapse 98. Central control 28 is notified of the vehicle's location. 
The vehicle can be reactivated by entering a valid driver code. The prior drivere code will be 
valid again after the. defined rest period has lapsed In the illustrated embodiment, the system 10 
notifies central control and logs and transmits a real time photo of the driver when the 
unauthorized driver and hours of service check 48 determines that the driver is not authorized. 

Allowable hours of service can be entered into the onboard computer 18 that can keep 
track of each identified authorized driver to track the number of hours the driver operates the 
vehicle. Using an uitemal clock or time obtained fi-om a global positioning system the onboard 
computer 18 can also determine when enough time has elapsed to consider the driver to have had 
enough time to rest and resume driving. 

The vehicle owner can predetermine the degree to which the vehicle is disabled or shut 
down. The disabling or shut down can include activation of a fifth wheel or trailer door locks. 

Vehicle operation without proper driver identification is considered to be imauthorized 
use of a vehicle. Prolonged use of the vehicle by an apparenfly known driver who fails to take or 
pass the competency test 46 results in a message being sent via cell phone, radio or satellite 
transmission to the fleet manager. Global positioning system data will be sent to the fleet 
manager alerting the fleet manager of the vehicle's location. In the illustrated embodiment, 
manual entry of the driver identification is employed since keys and bar codes could be 
inadvertentiy left in the vehicle. Manual entry of the driver identification number may also form 
part of the driver competency test 46. 

After a Umited number of attempts are made to enter the driver identification number the 
system will lock down and notify the fleet manager of the vehicle's location. 

An active intervention option is available to the fleet manager to restrict vehicle 
performance remotely, to encourage the xmauthorized driver to pull off the road, or the fleet 
manager could pass along the vehicle description and its location to law enforcement persoimel 
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9. 

Figure 9 is a flow chart fliat illustrates the deviation from a planned route check 50. The 
global positiomng system 24 tracks the location of the vehicle 12 and provides the location of the 
vehicle 12 to the onboard computer 1 8. The onboard computer 18 determines whether the 
vehicle has deviated from the authorized route in excess of a predetermined limit at 110. If the 
onboard computer 18 detemiines that the vehicle has not deviated from the authorized route, a 
predetermined amount of time, five minutes in the illustrated embodiment, is allowed to elapse 
and the check 50 is performed again. 

If the vehicle onboard computer 18 determines that the vehicle has deviated from the 
authorized route in excess of company limits, the driver is notified to return to the planned route, 
contact central control for route deviation authorization or prepare to shut down the vehicle at 
1 12. In one embodiment, the driver is notified that the vehicle will be shutdown in 15 minutes. 
The system 10 contacts central control 28 to notify central control 28 that the tractor trailer 16a, 
16b has deviated fix)m the authorized route. 

The onboard computer 18 then checks to determine whether the vehicle has entered a 
restricted perimeter or is approaching a restricted perimeter at 1 14. In the illustrated 
embodiment, the vehicle onboard computer 18 determines that the vehicle 12 is in a restricted 
perimeter when the distance between the vehicle global positioning system location and the 
restricted perimeter global positioning system location is less than a predetermined distance X. 

If the onboard computer 1 8 determines that the vehicle has not entered a restricted 
perimeter or is not approaching a restricted perimeter, the onboard computer 1 8 determines 
whether the vehicle has returned to the planned route or obtained a route deviation authorization 
code within a predetermined time at 1 16. hi one embodiment, the predetermmed time is 
approximately 15 minutes. If the vehicle has returned to the planned route or obtained a route 
deviation, authorization code within the predetermined amount of time, the deviation from 
plaimed route check 50 is repeated after a given period of time elapses. 

If the onboard computer 1 8 determines that the vehicle has not retumed to the planned 
route or obtained a route deviation authorization code within a predetemiined amount of time, 
the driver is notified that failure to enter a deviation authorization code withm a predetermined 
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ainouht of timerfivemiMtes"i^ Embodiment; will result in vehicle shut down at 1 1 8. The 
system 10 notifies central control of^the vehicle location and impending shut down. The system 
10 logs and transmits a real time photo of the driver in the illustrated embodiment 

Vehicle shut down begins after the predetermined amount of time lapses at 120. The 
vehicle can be reactivated by entering a valid driver code .and temporary route deviaition code* 
The display 20 shows a note on the driver's screen with emergency instructions, a contact phone 
nimiber for use by emergency , or law enforcement personnel to obtain temporary authorization 
driver codes and route deviation codes at 122. 

If the onboard computer 18 determines that the vehicle has entered a restricted perimetCT 
at 1 14 the driver is notified that an unauthorized perimeter has been breached and the vehicle will 
be disabled within a given period of time, five minutes in the illustrated embodiment, if a proper 
authorization code is not entered 124, The system instracts tiie driver to pull off the road or 
redirect the vehicle. The system notifies central control 28 of the vehicle location and informs 
central control 28 that a breach of a restricted area occurred. The system 10 logs and transmits a 
real time photo of the driver, 

The onboard computer 1 8 monitors information from the global positioning system 
antenna 24 to determine the position of the vehicle 12. The onboard computer 18 determines 
whether a route deviation authorization code is entered within the given period of time, five 
minutes in one embodiment, or the vehicle has left the restricted perimeter at 126. If the onboard 
computer 18 determines that a route deviation authorization code is entered within the 
predetermined time or the vehicle has left the restricted area, the onboard computer 1 8 
determines whether the vehicle has returned to the planned route or entered a route deviation 
authorization code at 1 1 6. 

If the onboard computer 18 determines that a route deviation authorization code was not 
entered within the prescribed period of time, or the vehicle has not left the restricted perimeter, 
the system 10 begins vehicle shut down 128. In one embodiment, vehicle shut down begins 
immediately. The system 10 notifies central control and law enforcement officials 9 of the 
vehicle location and that the restricted area has been breached. The vehicle 12 can be reactivated 
by entering a valid driver code and temporary route deviation code. The system 10 shows a note 
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on the driver's screen with -emergency instructions, a contact phone number for use by emergency 
or law enforcement personnel to obtain temporary authorized driver code and route deviation 
code 122/ 

In the exemplary embodiment, authorized vehicle routes are defined by a central control 
similar to an aircraft flight plan and given a route code nianber for entry into the onboard 
computer 18. The driver may deviate from the authorized route within a defined tolerance radius 
established by central control or if the driver is given a temporary override code by central 
control. The onboard computer 18 compares the vehicle's global positioning system location to 
the authorized route to determine compliance. 

Restricted areas are considered to be sensitive and should not be entered without specific 
authorization byjthe site itself Examples of possible restricted sites are as follows: ' 

1 . Nuclear facilities 

2. Military posts and/or National Guard Armories 

3. Water supplies 

4. Oil refineries 

5. Suspension bridges 

6. Tuimels 

Specific^lobal positioning system locations for each site entered into the computer may 
be offset slightly to avoid providing specific sensitive information about the site. The perimeter 
around each site can be given a imique radius by the system 10. 

In one embodiment, the onboard computer 18 sends a radio message to the restricted site 
notifying the restricted site of the approaching vehicle and the vehicle's identification. The 
restricted site may then send a warning that the vehicle is not authorized. If an unauthorized 
vehicle continues to approach the restricted site after the warning is givCT, the restricted site 
controller could then send a second radio signal to disable the vehicle. In one embodiment, the 
default code could be to disable the vehicle unless the restricted site sends a positive 
authorization directed to a specific vehicle. 

Figure 10 is a flow chart that illustrates the unplanned trailer uncoupling check 52. In the 
exemplary embodiment, the onboard computer 18 monitors an electrical cable 130 that supplies 
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power to the trdl'er"r6bT"In"the'exemplary embodiment-&^ 18-is programmed 

to define a planned trailer uncoupling-location. The onboard computer 18 determines whether 
the trailer electrical cable has been disconnected at a location outsi4e the plaimed uncoupling 
location at 132. In the exemplary embodiment, the planned trailer uncoupling location includes a 
predefined radius around the selected location. _ 

If the onboard computer 1 S determines that the trailer electrical cable has not been 
disconnected at a location outside the planned global positioning system radius for trailer 
uncoupling, the routine ends and maybe repeated periodically. 

If the onboard computer 1 8 determines that the trailer electrical cable has been 
disconnected at a location outside the planned trailer uncouplmg radius, the satellite 
communications unit 26 of the system lO/transmits the vehicle location and fault condition to , 
central control 28 at 134. The system 10 notifies the driver that the trailer cable should be 
reconnected and/or an override code should be entered. An optional trailer battery backup is 
activated and the satellite communications unit 38 of the trailer 16b transmits the trailer 16b 
identification and location to the central control 28 if the location is different than the location of 
the tractor 16a. In one embodiment, the onboard computer 18 of the trailer 16b activates optional 
trailer door-locks, a fifth wheel 87 lock, deflates vehicle tires 89 and/or applies trailer spring 
brakes. In an altemate embodiment, the onboard computer 18 remotely applies trailer door locks 
and/or applies trails spring brakes. 

In the illustrated embodiment, the system 10 retransmits the tractor 16a and/or trailer 16b 
location to central control 28 each time a predetermined amount of time elapses, only if the 
location of the tractor 16a and/or trailer 16b changes. In the illustrated embodiment, the camera 
19 takes a picture of the driver and transmits it real time if the vehicle is moving at 135. The 
onboard computer 18 continues to monitor the electrical cable 130 that powers the trailer 16b. 
The onboard computer 18 determines whether the trailer cable has been reconnected and an 
override code entered or the trailer 16b has been moved to an authorized uncoupUng location at 
136. If the trailer cable has been reconnected and an override code has been entered, or the 
trailer 16b has been moved to an authorized imcoupling location, the routine ends or may be 
repeated after a predetermined amount of time. If the trailer cable has not been reconnected, an 
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override code has not been entered and the trailer has not been moved to an authorized 
uncoupling location as detected by the global positioning system, the system 10 retransmits the 
vehicle and/or trailer location if the location has changed at 135. 

The S3^em on the trailer 16b is similar to the system on flie tractor 16a. Improper 
disconnection of the electrical cable 130 activates the system on the trailer 16b. 

Figure 1 1 is a flow chart that illustrates the unplanned loss of power check 54 to the 
system onboard computer 18, The system 10 is equipped with a battery backup 100 in the 
illustrated embodiment for limited satellite commimications of global positioning sj^em 
location in case the main power is shut off prior to entry of properly authorized maintenance 
codes. A minimum number of daily transmissions of data would be expected. Failure of the 
system to communicate with the central location may provide an indication of vehicle tampering. 
An unplanned loss of main electrical power to the system onboard compute: indicates possible 
tampering. The system onboard computer is powered by the vehicle's main power supply 138. 
The battery backup powers the onboard computer 18 when the main electrical power supply 
becomes unavailable to the onboard computer 18. The onboard computer 18 determines whether 
the main electrical power supply is available to the . onboard computer 140. If the onboard 
computer 18 determines thiat the main electrical power supply is available to the computer 18, the 
unplanned loss of power routine ends and may be repeated at given time intervals. If the onboard 
computer 18 determines the main electrical power supply is not available to the onboard 
computer 18 the battery backup is activated at 142. The onboard computer 18 causes the satellite 
communications imit 26 to transmit the global positioning system location, the vehicle 
identification number and fault condition to central control 28. The system 10 also requires that 
the driver enters a proper disarming code or reestablishes main electrical power to the onboard 
computer 18 within a predetermined period of time, fifteen minutes in the illustrated 
embodiment, or the vehicle may be furthCT disabled. 

The onboard computer 1 8 determines whether the main electrical power has been 
reestablished or proper disarming codes are entered within the given time period at 144. If the 
main electrical power is reestablished within the given time or proper disarming codes are 
entered, the unplanned loss of power routine 54 ends and may start again after a predetermined 
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amount of time elapses.—If the electrical power is not-reestablished and-disaraiing codes are not 
entered within the given period of time, the system 10 transmits the global positioning system • 
location, vehicle identification nmnber, real time photo of tiie drivei; and fault condition to central 
control 28 if the vehicle location changes at 145. In the exemplary embodiment, this information 
is transmitted each time a predetermined amount of time.6lapses, fifteen minutes in one 
embodiment, until the vehicle stops moving. 

In one embodiment, the vehicle owner may program a disable feature that disables the 
vehicle if the power to the onboard computer 1 8 is removed. When the disabling feature is 
programmed, the vehicle 12 will be disabled at this point. The system 10 can be reset by 
reestablishing the system power or overridden by entering a disannmg code. 

Figure 12 is a flow chart that illustrates the daily reporting and maintenance check 56. In 
the illustrated embodiment, the onboard computer 1 8 compares vehicle mileage from that 
required for maintenance, identifies planned preventative maintenance requirements and 
identifies maintenance that fault codes indicates required 148. The onboard computer 18 
determines whether there are any fault codes or there is any planned maiatenance that is required 
149. If the onboard computer 18 determines that there are no fault codes and no planned 
maintenance is-required, the system 10 transmits vehicle fault and diagnostic codes, mileage, 
location, driver logged hours of service information, compliance to route and speed limits and the 
drivers decision regarding scheduling of maintenance required at 150. The daily 
report/maintenance check 56 waits twenty-four hours or for a specific time of day to transmit this 
information 152. The daily reporting and preventative maintenance scheduling routine is 
repeated periodically. 

If the onboard computer 18 determines that there are fault codes or plaimed maintenance 
is required, the system 10 causes the display 20 to indicate that maintenance is required and/or 
there are fault codes 154. The onboard computer 18 uses the global positioning system location 
of the vehicle relative to the nearest authorized maintenance site and provides the driver the , 
option to view directions to the maintenance site and the area in proximity with the maintenance 
site. 

The system 10 then asks the driver if the driver wishes to schedule repairs or maiiitenance 
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per the onboard computer recommendation at 156. If the drivCT answers "no" the system 10 
transmits vehicle fault and diagnostic codes, mileage, location, driver log hours of service 
information, compliance to route and speed limits, and the driver's decision regarding scheduling 
of maintenance at 150. If the driver decides to schedule repairs or maintenance per the onboard 
computer recorranendation, the onboard computer 18 willjequest confirmation of scheduled 
maintenance at the selected maintenance facility at 158, The onboard computer 18 notifies the 
diYver whether or not maintenance has been scheduled. The authorized maintenance site will 
update the maintenance status of the computer 1 8 after the work has been completed. The 
vehicle fault and diagnostic codes, mileage, location, driver log hours of service information, 
compliance to route and speed limits and the driver's decision regarding scheduling of 
maintenance is transmitted to central control at 150. 

The daily reporting and maintenance check allows the central control 28 to monitor the 
vehicle's maintenance status and the driver's decision regarding required maintenance. 

In the exemplary embodiment, the extent to which the vehicle is "shut down" is 
controlled by the vehicle owner, within limits. The owner may disable or reduce any of the 
computer controlled functionality of the vehicle to safely inhibit further unauthorized usage of 
the vehicle. For example, the vehicle owner may reduce the available fuel flow of the vehicle to 
limit the speed of the vehicle or limit the load a vehicle can handle. A more drastic measure 
would be to completely shut off the fuel flow or deflate one or more of the vehicle's tires. 

The following table provides examples of some of the conditions detected by the 
unauthorized usage system 1 0 and responses that may be provided by the system. 
Information that can be logged with the system using the driver identification includes GPS 
information, vehicle speed and engine ruiming time. The system can give an alert to the driver or 
fleet manager when a given driver is approaching or exceeding the safe amount of time on the 
road without proper rest. Non driving time can be separated by the system using zero speeds or 
fixed global positioning system positions as defining factors. The system 10 detects driver 
identification or lack thereof, reaction time or alertness test results, odometer reading and vehicle 
speed, real time clock and data information, date and time of the usage of the emergency override 
feature and time and distance driven in the emergency override mode, failure to pull over for 
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retest, including mileage and time beyond reasonable request, global positioning system data for 
vehicle location and vehicle identification nimiber and description* The driver may be identified 
by a bar code, a smart key or manual entry of the driver identification number. 
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CONDITION 


PASSIVE RESPONSE 


ACTIVE RESPONSE 
OPTIONS 


Unidentified driver 


1. Report location and 
condition to fleet manager 
yia cell phone or satellite 
communication. ^ 

2. Request driver to idmtify 
self. 

3. Continue vehicle tracking 
-GPS. 


1 . Notify driver of impending 
shutdown. 

2. Shutdown vehicle or alter ♦ 
performance characteristics. 

3. Ask authorities to 
intercept vehicle giving them 
its real time location. 

4. Activate fiflh wheel & 
trailer door locks. 


Driver fails alertness test or 

exceeds HOS 

(hours of service) limits 


1. Record occurrence in 
driver's log for future review 
by fleet manager, 

2. Notify fleet manager via 

communication. 


1. Disable cruise control, 

2, Request that driver 
voluntarily shut down the 
vehicle. 

D» ouui iiowu vcnicic oxicr 
warning. 


Deviation from planned path 


1. Report location & 
condition to fleet manager, 

2. Request driver contact 
fleet manager. 


Shut down vehicle or notify 
authorities of vehicle location 
if driver is also unidentified. . 


Unplanned loss of main 
electrical supply to 
unauthorized vehicle usage 
system 


1. Using battery backup, 
begin transmission of 
condition & GPS data, 

2. Request mechanic enter 

1*\TT\T^***t" /ilCdnniTICT C*f\t^^ 

^Lyj^Ck UXoAl 1111X1^ i/UiJ.C 


1. Notify fleet manager or 
authorities of possible vehicle 
tampering. 

2. Activate trailer fifth 

WXlCC/i) GcLD UCrOr oliU. LiaUcr 

door locks. 


Daily Reporting 


Transmit location, vehicle 
maintenance status and driver 
log information. 


Schedule mid trip 
maintenance and notify driver 
requirement and location for 

service 


Unplanned trailer uncoupling 


1. Request driver contact 
fleet manager and/or entry of 
proper disarm code. 

2. Transmit GPS data and 
condition. 


Activate trailer door deadbolt 
& spring brakes. Notify 
authorities of last known 
trailer location & cimrent 
location of tractor. 
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^AlthWgb'the present invention has been described with a degree of particularity, it is the 
intent that the invention include all modifications and alterations falling Avith the spirit and scope 
of;the following claims. i 
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CLAIMS 

I Claim: 

!• A method of disabling a vehicle, comprising: 

a) detemiining that a driver is not authorized to drive the vehicle; 

b) determining tiiat said vehicle has deviated froriLa planned route; 

c) requesting that the driver enter an authorized driver code within a given period of time; 

d) determining that an authorized driver code has not been entered by the driver; 

e) tracking a location of tiie vehicle and notifying a central control of said location; and 

f) disabling said vehicle. 

2. The method of claim 1 further comprising reactivating flie vehicle after a valid 
driver code is entered. 

3 . The method of claim 1 further comprising a picture of said driver. 

4. The method of claim 1 further comprising transmitting said picture to a central 
control. 

5. An apparatus for disabling a vehicle,.comprising: 

a) a vehicle computer having an interface that allows a driver to enter a driver 
authorization code, said compute being programmed to determine that a driver is not authorized 
to operate the vehicle; 

b) a global positioning system coupled to said computer for determining that said vehicle 
has deviated from a planned route, said computer being programmed to disable said vehicle when 
said driver is not authorized and said vehicle has deviated from said plaimed route. 

6. The apparatus of claim 5 further comprising a camera coupled to said computer 
for taking a picture of the driver when said computer determines the driver is not authorized. 
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I. Amethoddfdisablinga vehicle; comprising: 

a) defining an authorized -route with an acceptable deviation radius; 

b) determining fliat a location of said vehicle is outside said acceptable deviation radius; 

and 

c) shutting said vehicle down. 

8. The method of claim 7 further comprising taking a picture of the driver when the 
vehicle is outside said acceptable deviation radius. 

9. The method of claim 7 further comprising transmitting said picture to a central 
control site. 

10. An apparatus ofdisabling a vehicle, comprising: 

a) a computer programmed to define an authorized route with an acceptable deviation 
radius; and 

b) a global positioning system coupled to said computer for determining a location of the 
vehicle, said computer being programmed to determine whether a location of said vehicle is 
outside said acceptable deviation radius and to shut the vehicle down if the vehicle is outside the 
acceptable deviation radius for a predetermined time period. 

II. The apparatus of claim 10 further comprising a camera coupled to said computer, 
said computer being programmed to cause said camera to take a picture of the driver when the 
vehicle is outside the acceptable deviation radius for the predetermined time periods. 

12. A method of selectively disabling a vehicle driven by a driver, comprising: 

a) defining an authorized route with an acceptable deviation radius; 

b) determining whether a location of said vehicle is outside said acceptable deviation 

radius; 

c) notifying the driver and a central control that the vehicle has deviated from said 
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authorized route; 

d) providing an interface between the driver and said central control fliat allows the driver 
to request authorization to deviate from said authorized roxrte; 

e) determining whether authorization from said central control to deviate from said 
authorized route is granted; ' _ 

f) allowing said vehicle to deviate from said authorized route when said authorization to 
deviate from said authorized route is granted; and 

g) shutting the vehicle down if the vehicle fails to enter .said acceptable deviation radius 
or obtain authorization to deviate from said authorized route, 

13. The method of claim 12 furfliCT comprising reactivating said vehicle by entering a 
valid driver code and a temporary route deviation code. 

14. The method of claim 12 further comprising displaying emergency start 
instmctions when said vehicle is shut down. 

• 15, The method of claim 12 further comprising displaying contact information that 
allows emergency personnel to obtain said valid driver code and said temporary route deviation 
code. 

16. An apparatus of selectively disablmg a vehicle dnven by a driver, comprising: 

a) a computer programmed to define an authorized route with an acceptable deviation 

radius; 

b) a global positioning system coupled to said computer for determining a location of said 
vehicle, said computer being programmed to determine whether a location of said vehicle is 
outside said acceptable deviation radius; 

c) a communication system coupled to said computer for notifying the driver and a central 
control that the vehicle has deviated from said authorized route, said communication system 
provides an interface between the driver and said central control that allows the driver to request 
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authorization to deviate from said authorized route, said computer being programmed to 
determine whether authorization from said central control to deviate from said authorized route is 
g-anted, said computer being programmed to allow the vehicle to deviate from said authorized 
route when said authorization to deviate from said authorized route is granted to shut the vehicle 
down if the vehicle fails to enter said acceptable deviatiooxadius or obtain authorization to 
deviate &om said au&orized route. 

1 7. The apparatus of claim 1 6 wherein said computer is programmed to reactivate the 
vehicle when a valid driver code and a tanporary route deviation code are entered. 

1 8. The apparahis of claim 16 fiirther comprising a display coupled to said.computer 
for displaying emergency start instructions when said vehicle is shut down. 

1 9. The apparatus of claim 1 6 further comprising a display coupled to said computer 
that displays contact information that allows emergency personnel to obtain said valid driver 
code and said temporary route deviation code. 

20. A method of selectively shutting down a vehicle, comprising: 

a) defining a perimeter around a restricted area; 

b) determining that a location of said vehicle is inside said perimeter; and 

c) shutting said vehicle down. 

21 . The method of claim 20 further comprising taking a picture of the driver when the 
vehicle is inside the perimeter. 

22. An apparatus for selectively shutting down a vehicle^ comprising: 

a) a computer programmed to define a perimeter around a restricted area; and 

b) a global positioning system coupled to said computer for detemiining a location of the 
vehicle, said computer being programmed to determine whether a location of said vehicle is 
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inside said perimeter and to shut the vehicle down if the vehicle is inside said perimeter. 

23\ The apparatus of claim 22 further comprising a camera coupled to said computer 
for taking a picture of the driver when the vehicle is iinside said parameter, 

24. The method of clahn 22 further comprising deflating a tire of the vehicle if the 
vehicle is inside said perimeter. 

25. A method of selectively shutting down a vehicle driven by a driver, comprising: 

a) defining a perimeter around a restricted area; 

b) determining that a location of said vehicle is inside said perimeter; 

c) notifying the driver, a central control, and a restricted area site that the vehicle is in 
said perimeter; 

d) determining whether authorization from said restricted area site to enter said perimeter 
is granted; 

e) allowing said vehicle to enter said perimeter when said authorization to enter said 
perimeter is granted; and 

f) shutting the vehicle down if the vehicle fails to leave said perimeter or obtain 
authorization to enter said perimeter. 

26. The method of claim 25 further comprising notifying law enforcement ofGcials 
that said perimeter has been breached. 

27. The method of claim 25 further comprising reactivating said vehicle by entaing a 
valid driver code and a temporary route deviation code. 

28. The method of claim 25 further comprising displajdng emergency start 
instructions when said vehicle is shut down. 
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29. - -The method of claim 25 further comprising displaying contact information that 
allows emergency personnel to obtain said valid driver code and said temporary route deviation 
code. 

30. An apparatus for selectively shutting downa vehicle driven by a driver, 
comprising: 

a) a computer programmed to define a restricted area and a perimeter around a restricted 

area; 

b) a global positioning system coupled to said computer for determining a location of said 
vehicle, said computer being programmed to determine whether a location of said vehicle is 
within said perimeter; and 

c) a communication system coupled to said computer for notifying the driver, a central 
control and a restricted area site that the vehicle has entered said perimeter, said computer being 
programmed to determine whether authorization from said restricted area site to enter said 
perimeter is granted, said computer being progranmied to allow the vehicle to enter said 
perimeter when said authorization to enter said perimeter is granted and to shut the vehicle down 
if the vehicle fails to leave said perimeter or obtain authorization to enter said perimeter. 

31. The apparatus of claim 30 wherein said computer is programmed to reactivate the 
vehicle when a vaUd driver code and a temporary route deviation code are entered. 

32. The apparatus of claim 30 further comprising a display coupled to said computer 
for displaying emergency start instructions when said vehicle is shut down. 

33. The apparatus of claim 30 further comprising a display coupled to said computer 
that displays contact information that allows emergency personnel to obtain said valid driver 
code and said temporary route deviation code. 
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